From 65c7872a3f1f259637d34a1342088614cc2c24bb Mon Sep 17 00:00:00 2001 From: Masaki Ambai Date: Thu, 24 Jun 2021 16:41:26 +0900 Subject: [PATCH] nss: add CVE-2006-5201 to allowlist CVE-2006-5201 affects only using an RSA key with exponent 3 on Sun Solaris. Signed-off-by: Masaki Ambai Signed-off-by: Khem Raj (cherry picked from commit 44113dcb5feea5522696d43d00909db41e5e6dbc) Signed-off-by: Armin Kuster (cherry picked from commit ace5cd9a8bb6ba0058caf8a148437820a9336b9c) [Fixup for Dunfell context] Signed-off-by: Armin Kuster --- meta-oe/recipes-support/nss/nss_3.51.1.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-oe/recipes-support/nss/nss_3.51.1.bb b/meta-oe/recipes-support/nss/nss_3.51.1.bb index 30370573d4..13661cc967 100644 --- a/meta-oe/recipes-support/nss/nss_3.51.1.bb +++ b/meta-oe/recipes-support/nss/nss_3.51.1.bb @@ -285,3 +285,6 @@ FILES_${PN}-dev = "\ RDEPENDS_${PN}-smime = "perl" BBCLASSEXTEND = "native nativesdk" + +# CVE-2006-5201 affects only Sun Solaris +CVE_CHECK_WHITELIST += "CVE-2006-5201"